Plugins

Multi-channel notifications for DeepSeek Harness: registers a send_notification tool and a settings page fanning out to NotifyX, WeCom app webhook, WeCom group robot, email (Resend), SMTP, DingTalk, Feishu robot; plus browser notifications and automatic notification on task completion and blocking events.

Branch-role guard for AI coding agents: configurable integration/preview/production/archive roles, blocking direct push, force-push and delete on protected branches and agent merges into production/archive.

String-matches tool-call input arguments, blocks dangerous tool calls (deny) or allows them with an injected warning (warn), and ships a full rules-management panel.

Reusable skill to browse, search and download Wallpaper Engine (Steam 431960) workshop wallpapers and wire them into the DSH skin center, including bypassing the Steam HTTP block and the region-mismatch sign-in block via a matching SOCKS proxy.

Static-only plugin gate and clinic for DSH: audit before install, hash-and-capability lock after install, local fingerprint peer search over GitHub topic:dsh-plugin, and mechanical detox. Never executes the target plugin.

Full-screen lightbox for chat images: click any image to open the full-resolution original with zoom (wheel, buttons, shortcuts), drag panning, prev/next paging, filename caption and download, plus keyboard-arrow and touch-swipe navigation. One "image display control" popover next to the composer collapses every image in the conversation into a thumbnail grid whose column count (1-12) is configurable and remembered, or hides them entirely so the space closes up and restores them later; images are styled in place and no node is ever moved or reparented. The host-side display_image tool takes a local path or directory (TIFF/HEIC transcoded, originals still saved on download), a remote URL, or a keyword search over Bing, Huaban and Sogou that samples loadability before picking a source, re-saves images blocked by hotlink protection and drops dead links after a magic-byte check, returning paste-ready Markdown. It also keeps a system-prompt rule that every delivered image must appear in the reply body as  markdown, because collapsed tool rows are invisible to the reader.

Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.

Source-aware prompt injection guard for DSH: tracks untrusted turn context, detects injection signals, scores sensitive sinks, and blocks high-risk tool calls with explainable audit logs.

Acceptance-criteria-driven goal completion: locks verifiable criteria, tracks task dependencies, and gates completion behind formal reviewer validation (18 MCP tools).

Anchors an approve/answer bubble to each DSH Web sidebar session row — one-click handling of authorization, questions, plan reviews and blocked goals without opening the conversation.

Achievement and gamification plugin: unlock badges for turns, tool calls, sessions, daily streaks and coding behavior (edits/reads/tests), with a badge wall, unlock toasts and a ctx.achievements SDK.

Live CVE/supply-chain audit for your workspace's own project dependencies (npm/pip/go), backed by OSV.dev, with a `cve_audit` tool plus optional automatic re-scan on lockfile changes.

Professional translation for DSH: 18 target languages, 4 styles (formal/casual/technical/literal), glossary-controlled terminology, and whole-file translation (README/docs/subtitles) with Markdown/code-block format preservation; powered by DeepSeek via SiliconFlow.

Claude-Code-style lifecycle hooks: configured shell commands run before/after model tool calls with a JSON payload on stdin; a non-zero pre-tool exit blocks the call.

Runs shell commands on machines you have paired with eXe, over its relay, and reads images back from them as image blocks for the model: three model tools (device list, shell, image — take a screenshot with the shell tool, then read the file), plus a sidebar page that shows the caller address of this machine, edits the device and trusted-caller lists with labels, and times a real call to each device on demand. Needs the eXe client running on those machines and a caller key from `exe mcp init` on this machine.

Redacts secrets, cookies and personal data in every model request at the host process undici dispatcher and restores the placeholders in the reply, so one interception covers every provider, adapters that plugins add included; per-kind actions mask / warn / block, an optional same-shape fake key, records written to disk by the day and a statistics card.

IM stand-in seat for DeepSeek Harness: a sidebar panel polls Feishu/Lark, WeCom and DingTalk (switched on from the panel) through the platform CLI you are already logged in to, and wakes the DSH session you bound when a new message arrives, so that session reads it and replies as you — drafts are shown to you first unless you have explicitly allowed sending without confirmation. Groups are polled only after you add them to the watch list, and by default only @-mentions wake the agent; blocked chats are never fetched, message bodies stay in a local state file, and the plugin opens no port of its own.

Honor of Kings inspired theme for DeepSeek Harness: the Jing · Blazing Sunlight key art is inlined and painted into the window backdrop and both main panels, over an ink night sky with a molten gold sun, frosted mirror shards, drifting embers and a three-level motion switch (full / calm / off). Colours come from overridden design tokens, so panels, bubbles, menus and code blocks follow the theme.

Windows-only guard against the desktop shell locking itself out: it counts the dsh-auth-* launch cookies the shell has accumulated, reports how much of the 16 KiB request-header budget they consume, and once the count passes 40 it backs up the whole Cookies database and lets DSH rebuild it, so every cookie in that profile is cleared. Install is one command: on load the plugin registers its own weekly scheduled task pointing at the scripts inside the package, and uninstalling it removes that task — nothing to copy into your home directory and no schtasks line to run by hand. The check itself runs while the app is closed (it waits up to 3 hours for the shell to exit). It does not raise the header budget or keep a floating panel; scripts/ can also be run standalone without the app installed.

Adds an Amadeus-inspired launch panel with a clock and navigation shortcuts.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

IMPORTANT: refresh immediately after installation or open /login. An old page showing connection failure or HTTP 401 needs sign-in, not reinstalling; it may be unable to load the plugin notice. Windows 11 Web users can enable background power services from the Power menu without a terminal. Initial setup displays a temporary password on the page, never in terminal logs; initialize in a trusted network and change it immediately. Web-profile lock screen with password/OTP/Passkey, persistent sessions and custom wallpapers. Linux/macOS power controls need the bundled systemd/launchd controller; npm updates require a dedicated managed install, never a shared/global prefix. Electron Desktop is not supported. Stopping interrupts active tasks. Auth kernel adapted from xbzbing/dsh-auth-gateway (MIT); do not co-install, both own the web gateway port.

Config-driven lifecycle hooks for DSH: block or observe tool calls, and react to completed turns, messages, and title changes with shell commands.

Long-term memory for dsh with defense-in-depth hardening. Two tiers (project `.dsh-memory/` and user `$DSH_HOME/memory/`), each a plain hand-editable JSON file with bounded entries and tags. Writes are atomic (unique temp file + rename, previous revision kept in a bounded history/) and serialized across processes by a per-tier lock with stale reclaim; a disk-revision check refuses lost updates instead of silently overwriting another writer. Memory text is wrapped in explicit untrusted-data boundaries (forged wrappers stripped on write) to blunt prompt injection from remembered content, load-time validation rejects out-of-bounds stores, and symlink escapes out of the tier directory are refused with MEMORY_STORE_ESCAPE. No content-heuristic filtering and no confirmation step, so headless auto-consolidation stays intact. Install: dsh plugin --profile web add github:RocoFish/deepseek-memory.